$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd356ff-b190-3c03-a79a-e15cdfc74936.roa File: 0bd356ff-b190-3c03-a79a-e15cdfc74936.roa (raw, json) Hash identifier: XjtOZqyuj3uRNAtn9iXNJOwY2oBkCeZSjhyLBqozqZQ= Subject key identifier: CE:D7:B2:DD:6F:80:64:5C:03:35:C3:03:C1:71:1E:53:06:17:A9:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD2CE20B9026223884F900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd356ff-b190-3c03-a79a-e15cdfc74936.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 96.17.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:2c:e2:0b:90:26:22:38:84:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=0e8c4497-877b-42be-8497-2bdad3d827e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:9f:a9:b0:0c:4c:15:e0:ca:2c:1e:d2:6c: d6:d7:ac:ad:f6:3e:53:45:60:46:fc:c2:20:ea:ca: ae:13:62:95:86:12:af:72:59:47:fb:a5:81:c9:43: bd:1a:4b:89:64:29:ca:ef:1f:fc:39:e8:01:9b:63: 4b:73:f1:3c:09:94:ff:08:fb:e4:52:df:db:fd:13: 2e:12:7b:cb:cd:0e:c4:9c:da:f0:5e:d5:85:f5:83: 9d:f6:5e:75:dc:ee:44:db:b1:65:80:ef:ac:b5:0b: a1:96:52:4f:2e:60:f7:2e:0f:c5:6f:04:db:d9:f6: 7a:a4:9c:81:6a:04:2b:3e:68:ec:11:ac:39:20:f8: d9:dc:45:dc:55:62:0a:c9:c0:fa:98:3f:74:ea:e6: 22:61:9c:c8:1e:00:69:af:4f:e1:1c:ad:ee:b0:81: 92:a9:34:70:50:f3:27:45:af:37:45:70:d5:0e:9d: f4:f4:10:d6:6f:1b:ef:ef:cb:d6:fa:3a:2f:4d:21: df:ec:2e:09:39:53:f9:97:10:e4:bf:16:14:a3:04: a5:62:ee:24:1c:6a:07:26:41:c1:93:84:61:ff:5d: 93:82:e0:65:e7:87:65:d3:dc:17:61:53:90:7b:32: 8b:5b:90:1a:08:54:6b:72:31:1f:b6:61:7c:dc:2e: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D7:B2:DD:6F:80:64:5C:03:35:C3:03:C1:71:1E:53:06:17:A9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd356ff-b190-3c03-a79a-e15cdfc74936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:dc:33:9f:87:40:b6:28:2f:12:d9:20:32:1e:14:0b:ca:d5: 27:5d:0e:39:9f:64:46:67:76:d2:e5:fb:df:68:ed:08:e5:26: 31:c8:bb:d5:5b:e6:30:0f:b6:f5:c9:de:02:40:28:0e:83:87: 6e:82:30:67:0e:32:2d:83:98:30:d3:92:15:3b:2f:86:33:1b: 79:04:9d:80:58:1f:13:1b:f5:d1:47:4b:3f:7f:94:ff:29:04: 5a:c2:af:39:48:f2:63:2f:62:23:a9:ca:9c:ae:40:c3:4b:b5: 16:c7:5a:2f:94:89:6b:82:9c:66:7e:60:dc:44:b6:81:c2:02: b8:97:e9:65:5c:d4:30:7f:48:74:72:b1:7f:bc:d1:1e:f3:4d: e9:4a:32:5c:9f:35:bb:04:ae:a0:0c:37:55:ed:d0:0e:9b:00: 64:dc:2c:ec:e1:e1:5a:76:25:56:c5:52:15:32:1f:de:ec:f3: 88:73:03:ec:d4:84:2f:b7:6b:f6:2f:c8:1a:dd:7b:43:8f:ef: 10:92:a2:16:a7:ba:a3:ec:05:28:84:4d:74:95:5a:df:72:51: f3:1f:80:d3:32:02:1e:d3:fd:66:c6:c5:1c:4c:cc:be:46:f5: 3d:35:38:9b:54:3b:6c:14:9e:0e:be:c1:c0:89:80:de:12:ba: 7a:c4:1a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SziC5AmIjiE+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MGU4YzQ0OTctODc3Yi00MmJlLTg0OTctMmJkYWQzZDgyN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA2fqbAMTBXgyiwe0mzW16yt9j5TRWBG/MIg 6squE2KVhhKvcllH+6WByUO9GkuJZCnK7x/8OegBm2NLc/E8CZT/CPvkUt/b/RMu EnvLzQ7EnNrwXtWF9YOd9l513O5E27FlgO+stQuhllJPLmD3Lg/FbwTb2fZ6pJyB agQrPmjsEaw5IPjZ3EXcVWIKycD6mD906uYiYZzIHgBpr0/hHK3usIGSqTRwUPMn Ra83RXDVDp309BDWbxvv78vW+jovTSHf7C4JOVP5lxDkvxYUowSlYu4kHGoHJkHB k4Rh/12TguBl54dl09wXYVOQezKLW5AaCFRrcjEftmF83C5rQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7Xst1vgGRcAzXDA8FxHlMGF6kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJkMzU2ZmYtYjE5MC0z YzAzLWE3OWEtZTE1Y2RmYzc0OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLcM5+HQLYoLxLZIDIeFAvK1SddDjmfZEZndtLl+99o7QjlJjHIu9Vb 5jAPtvXJ3gJAKA6Dh26CMGcOMi2DmDDTkhU7L4YzG3kEnYBYHxMb9dFHSz9/lP8p BFrCrzlI8mMvYiOpypyuQMNLtRbHWi+UiWuCnGZ+YNxEtoHCAriX6WVc1DB/SHRy sX+80R7zTelKMlyfNbsErqAMN1Xt0A6bAGTcLOzh4Vp2JVbFUhUyH97s84hzA+zU hC+3a/YvyBrde0OP7xCSohanuqPsBSiETXSVWt9yUfMfgNMyAh7T/WbGxRxMzL5G 9T01OJtUO2wUng6+wcCJgN4SunrEGks= -----END CERTIFICATE-----Generated at Wed Nov 5 02:41:30 2025 by rpki-client